Public Release
John Jackson · 2021
The public program is meant to be a way of giving anyone and everyone a chance to research. Many enterprises may never reach this state depending on the size of their program, but it's the final incentive that most will want to reach. Regardless of the desired launch, there isn't exactly a right time to launch. The key principle is to not launch too early, to avoid issues with the team being overwhelmed. Managing the public release of a program requires diligent planning and careful execution, especially if the program belongs to a big-name company. The official recommendation is to release when ready and not based on a specific guideline. While having over 100 hackers seems to be a decent milestone, it may not equate to a prepared enterprise bug bounty program. Rolling a program back into private mode may be the only way to handle a situation in which a program manager wasn't prepared.